[Discuss] Log management options?

[Tom Metro]

Scott Ehrlich wrote:
> I'm looking for log management options for a network of Windows and
> Linux hosts on an isolated network.
> 
> I need tcp communication (vs udp) to ensure messages successfully get
> passed from client to log server.
> 
> Encryption of the message, too, between client to server would be
> great.    TCP alone would just provide plain-text.

rsyslog comes to mind:
http://www.rsyslog.com/

It's a jazzed up syslogd (drop-in replacement) that provides reliable[1]
and encrypted[2] transport options between the client and server. It
supports a bunch of back-ends (files, databases). Filtering rules. And
you can extend it with plugins.

Debian has chosen it as their default logging process.

Looks like they have a Windows client.

 -Tom

1. http://www.rsyslog.com/doc/rsyslog_reliable_forwarding.html
2. http://www.rsyslog.com/doc/rsyslog_secure_tls.html

-- 
Tom Metro
Venture Logic, Newton, MA, USA
"Enterprise solutions through open source."
Professional Profile: http://tmetro.venturelogic.com/